Конфиги https минцифры

1 files changed, 14 insertions, 9 deletions

diff --git a/etc/Caddyfile b/etc/Caddyfile
index c4d1520..038e420 100644
--- a/etc/Caddyfile
+++ b/etc/Caddyfile
@@ -41,19 +41,24 @@ neonxp.dev {
         redir https://neonxp.ru
 }
 
-neonxp.ru {
-        tls i@neonxp.dev
+neonxp.ru:80 {
+        encode gzip
+        root * /var/www/neonxp.dev/public
+        file_server
+        header / {
+                cache-control = "max-age=0,no-cache,no-store,must-revalidate"
+        }
+        log {
+                output file /var/log/caddy/neonxp.dev/neonxp.dev.log
+        }
+}
+
+neonxp.ru:443 {
+        tls /data/ssl/chain.cer /data/ssl/neonxp.ru.key
         encode gzip
         root * /var/www/neonxp.dev/public
         file_server
         header / {
-                Content-Security-Policy = "upgrade-insecure-requests; default-src 'self'; style-src 'self'; script-src 'self'; img-src 'self'; object-src 'self'; worker-src 'self'; manifest-src 'self';"
-                Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload"
-                X-Xss-Protection = "1; mode=block"
-                X-Frame-Options = "DENY"
-                X-Content-Type-Options = "nosniff"
-                Referrer-Policy = "strict-origin-when-cross-origin"
-                Permissions-Policy = "fullscreen=(self)"
                 cache-control = "max-age=0,no-cache,no-store,must-revalidate"
         }
         log {